Most requirements in PCI DSS version 4.0 have been re-worded and/or re-ordered so filling out your SAQ for version 4.0 may take a bit more time than usual initially. SAQ types that apply to ecommerce businesses as well as those using point-of-sale systems, or other payment application systems, connected to the internet have had a number of significant changes.

Completing version 4.0 assessment may take longer due to newly applicable requirements. It may help to be prepared in advance – know who to all in relation to the set up and security of your payment systems e.g., your eCommerce website, point-of-sale system etc.